Update apparmor_kernel_development_guide

John Johansen 2018-09-28 16:59:58 +00:00
parent 1fe2c93b1f
commit 82f49d2a39

@ -43,23 +43,17 @@ special none C files
- stacksplitdfa.in: precompiled dfa used in label parsing
Mediation
- capability.c
- domain.c
- file.c
- ipc.c
- net.c
- task.c:
- resource.c: mediation of rlimits, and also setting rlimits to profile defined values
- capability.c, include/capability.h: mediation of capability set
- domain.c, include/domain.h: mediation of exec transitions, and change_profile, ...
- file.c, include/file.h: mediation of file objects
- ipc.c, include/ipc.h: ptrace and signals
- mount.c, include/mount.h: mediation of mount, pivot root
- net.c, include/net.h: base socket mediation and support routines for fine grained mediation
- task.c, include/task.h: task related mediation and storing off of state for nonewprivs, change_hat, change_onexec
- resource.c, include/resource.h: mediation of rlimits, and also setting rlimits to profile defined values
- foo
lsm.c
apparmorfs
# apparmorfs: userspace interface, introspection and api
- virtualized policy/ directory
- jump link trick
- aa_fs - common fn() between apparmor security fs and special virtualized apparmorfs
@ -101,3 +95,9 @@ policydb
.null
# permission checks, caching and revalidation
# stacking
# Delegation
- TODO: this is not implemented yet.